Certification Training for 156-585 Exam Dumps Test Engine [2021]
Oct 23, 2021 Step by Step Guide to Prepare for 156-585 Exam
NEW QUESTION 44
During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?
- A. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg
- B. Redirect debug output to file; Use fw ctl debug -o ./debug.elg
- C. Increase debug buffer; Use fw ctl debug -buf 32768
- D. Increase debug buffer; Use fw ctl zdebug -buf 32768
Answer: C
NEW QUESTION 45
When a User process or program suddenly crashes, a core dump is often used to examine the problem. Which command is used to enable the core-dumping via GAIA dish?
- A. set core-dump per_process
- B. set core-dump total
- C. set user-dump enable
- D. set core-dump enable
Answer: B
NEW QUESTION 46
Vanessa is reviewing ike.elg file to troubleshoot failed site-to-site VPN connection After sending Mam Mode Packet 5 the response from the peer is PAYLOAD-MALFORMED" What is the reason for failed VPN connection?
- A. The authentication on Quick Mode is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 3 and 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key - B. The authentication on Phase 1 is causing the problem.
Pre-shared key on local gateway encrypted by the hash algorithm created in Packet 3 and Packet 4 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key - C. The authentication on Phase 2 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm created in Packets 1 and 2 doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key - D. The authentication on Phase 1 is causing the problem
Pre-shared key on local gateway encrypted by the hash algorithm doesn't match with the hash on the peer gateway generated by encrypting its pre-shared key created in Packet 1 and Packet 2
Answer: C
NEW QUESTION 47
Which of the following daemons is used for Threat Extraction?
- A. tex
- B. tedex
- C. extractd
- D. scrubd
Answer: C
NEW QUESTION 48
Check Point's PostgreSQL is partitioned into several relational database domains. Which domain contains network objects and security policies?
- A. System Domain
- B. Global Domain
- C. User Domain
- D. Log Domain
Answer: B
NEW QUESTION 49
You need to runa kernel debug over a longer period of time as the problem occurs only once or twice a week.
Therefore you need to add a timestamp to the kernel debug and write the output to a file What is the correct syntax for this?
- A. fw ctl kdebug -T -f -o filename debug
- B. fw ctl kdebug -T -f > filename debug
- C. fw ctl kdebug -T > filename debug
- D. fw ctl debug -T -f > filename debug
Answer: D
NEW QUESTION 50
You have configured IPS Bypass Under Load function with additional kernel parameters ids_tolerance_no_stress=15 and ids_tolerance_stress-15 For configuration you used the *fw ctl set' command After reboot you noticed that these parameters returned to their default values What do you need to do to make this configuration work immediately and stay permanent?
- A. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
- B. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf
- C. Set these parameters again with "fw ctl set" and save configuration with "save config"
- D. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters
Answer: B
Explanation:
Explanation
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=
NEW QUESTION 51
When a User Mode process suddenly crashes it may create a core dump file. Which of the following information is available in the core dump and may be used to identify the root cause of the crash?
i Program Counter
ii Stack Pointer
ii. Memory management information
iv Other Processor and OS flags / information
- A. D Only iii
- B. i and n only
- C. i, ii, lii and iv
- D. iii and iv only
Answer: D
NEW QUESTION 52
If you run the command "fw monitor -e accept src=10.1.1.201 or src=172.21.101.10 or src=192.0.2.10;" from the cli sh What will be captured?
- A. Packets destined to 172 21 101 10 from 10.1.1.101
- B. fw monitor only works in expert mode so no packets will be captured
- C. Only packet going to 192.0.2.10
- D. Packets from 10 1 1 201 going to 192.0 2.10
Answer: C
NEW QUESTION 53
What does SIM handle?
- A. Accelerating packets
- B. OPSEC connects to SecureXL
- C. FW kernel to SXL kernel hand off
- D. Hardware communication to the accelerator
Answer: B
NEW QUESTION 54
For TCP connections, when a packet arrives at the Firewall Kemel out of sequence or fragmented, which layer of IPS corrects this lo allow for proper inspection?
- A. Protocol Parsers
- B. Context Management
- C. Protections
- D. Passive Streaming Library
Answer: B
NEW QUESTION 55
Which of the following is NOT a vpn debug command used for troubleshooting?
- A. vpn debug trunc
- B. pclient getdata sslvpn
- C. fw ctl debug -m fw + conn drop vm crypt
- D. vpn debug on TDERROR_ALL_ALL=5
Answer: B
NEW QUESTION 56
Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers
- A. Context Management
- B. Pre-Protocol Parser
- C. fwtcpstream
- D. Passive Streaming Library
Answer: D
NEW QUESTION 57
What are some measures you can take to prevent IPS false positives?
- A. Capture packets. Update the IPS database, and Back up custom IPS files
- B. Use Recommended IPS profile
- C. Use IPS only in Detect mode
- D. Exclude problematic services from being protected by IPS (sip, H 323, etc )
Answer: D
NEW QUESTION 58
Which process is responsible for the generation of certificates?
- A. dbsync
- B. cpm
- C. cpca
- D. fwm
Answer: C
NEW QUESTION 59
......
Ultimate Guide to Prepare 156-585 Certification Exam for CCTE: https://www.vce4plus.com/CheckPoint/156-585-valid-vce-dumps.html
CCTE 156-585 Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1Bgc5UP5DoBBCmbL-OaeVK4OH3wLGvs9I